Skip to content

chore(deps): update all non-major dependencies - #98

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@vitest/coverage-v8 (source) ^5.0.4 → ^5.0.5 age confidence
c12 4.0.0-rc.2 → 4.0.0-rc.4 age confidence
exsolve ^1.1.3 → ^1.2.0 age confidence
magic-string ^1.4.3 → ^1.4.5 age confidence
oxfmt (source) ^0.72.0 → ^0.75.0 age confidence
oxlint (source) ^1.87.0 → ^1.90.0 age confidence
pnpm (source) 11.26.0 → 11.28.9 age confidence
rolldown (source) ^1.2.13 → ^1.2.15 age confidence
vitest (source) ^5.0.4 → ^5.0.5 age confidence

⚠️ Renovate does not enforce Minimum Release Age for bump, lockfileUpdate, or rollback updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).


Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v5.0.5

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
Rich-Harris/magic-string (magic-string)

v1.4.5

Compare Source

Bug Fixes
Performance Improvements
  • cut allocations and quadratic lookups on the sourcemap and bundle paths (#​379) (d081246)
  • find the slice start chunk without scanning the list (#​378) (6ab6b04)

v1.4.4

Compare Source

Bug Fixes
  • don't treat chunks emptied by an overwrite as removed in replace (#​367) (aed5675)
  • keep the content when update throws across a split point (#​364) (f815ec4)
  • respect the offset in snip (#​363) (bb5c6c2)
  • skip empty matches at a chunk boundary inside removed content (#​366) (5aab3bd)
oxc-project/oxc (oxfmt)

v0.75.0: oxfmt v0.75.0

Compare Source

🐛 Bug Fixes
  • 5042019 formatter: Keep fill layout for array with comment after [ (#​28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#​28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#​28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#​28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#​28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#​28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#​28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#​28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#​28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#​28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#​28025) (vidigoat)
  • 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#​27989) (leaysgur)
  • eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#​27987) (leaysgur)
⚡ Performance
  • 1ed93af data_structures: Copy short strings without a memcpy call (#​27953) (leaysgur)
  • 7948f0b formatter_core: Shrink FormatElement to 16B (#​28012) (leaysgur)
  • 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#​27963) (leaysgur)
📚 Documentation

v0.74.0: oxfmt v0.74.0

Compare Source

🐛 Bug Fixes
  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#​27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#​27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#​27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#​27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#​27780) (leaysgur)
  • 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#​27778) (leaysgur)
  • 5b2acb0 formatter_core: Report error position releative to CRLF source (#​27777) (leaysgur)
  • c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#​27776) (leaysgur)
  • 3a980c9 formatter_toml: Handle BOM like other languages (#​27775) (leaysgur)
  • 97c9fc4 oxfmt: Handle BOM in config JSON (#​27774) (leaysgur)
  • 28eb4a7 oxfmt: Print trailing newline for --list-different (#​27773) (leaysgur)
  • d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#​27737) (leaysgur)
  • 6a95ec1 formatter: Keep comment position on holey array (#​27730) (leaysgur)
  • 54769da formatter: Break after dangling line comment in holey array (#​27729) (leaysgur)
  • 99077ef formatter_json: Reject unary expressions other than signed numbers (#​27728) (leaysgur)
  • 22cd4cd formatter_json: Handle holey array and comments (#​27727) (leaysgur)
  • 644ca1c formatter: Do not indent logical chains whose right sides all inline (#​27667) (leaysgur)
  • a07a0fb formatter: Wrap comment-only JSX expression container in a group (#​27666) (leaysgur)
⚡ Performance
  • e220293 formatter: Check only the operator suppression mark in is_quiet (#​27952) (leaysgur)
  • e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#​27559) (leaysgur)
  • a342f7e formatter: Skip comment handling for nodes with no comment near them (#​27557) (leaysgur)
  • d8ce750 formatter: Write string literals with swapped quotes into the arena (#​27558) (Yuji Sugiura)
  • 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#​27561) (leaysgur)
  • 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#​27673) (leaysgur)
📚 Documentation
  • 1325225 oxfmt: Update useless comment prefix (#​27956) (leaysgur)
  • d0dd140 formatter: Note lossy cooked round-trip in template embeds (#​27944) (leaysgur)
  • 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#​27824) (leaysgur)

v0.73.0

Compare Source

🚀 Features
  • a495e82 oxfmt: Support associations config to specify language over filepath (#​27437) (leaysgur)
  • 5db28fa oxfmt: Support Astro via prettier-plugin-astro@1.x (#​27386) (leaysgur)
📚 Documentation
oxc-project/oxc (oxlint)

v1.90.0

Compare Source

🚀 Features
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#​28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#​28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#​28116) (camc314)

v1.89.0

Compare Source

🐛 Bug Fixes
  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#​27699) (camc314)

v1.88.0

Compare Source

🚀 Features
  • 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#​27346) (Mikhail Baev)
pnpm/pnpm (pnpm)

v11.28.9: pnpm 11.28.9

Compare Source

This release fixes a crash on registry responses with too many content encodings (GHSA-xjj6-f33q-929c) and sizes the install worker pool by the container's CPU quota. A repeat pnpm install now acts on more setting changes.

Patch Changes
Crashes and security
  • A registry response with too many content encodings can no longer crash pnpm. pnpm now uses undici 7.30.1, which fixes GHSA-xjj6-f33q-929c.

  • pnpm install now sizes its worker pool by the CPU quota of the container it runs in, such as a Kubernetes CPU limit, when that quota is smaller than the number of CPUs the container may run on. The default workspaceConcurrency respects the quota the same way. On a CI runner with a 4-CPU quota and hundreds of host CPUs, pnpm started hundreds of workers and ran out of memory #​17382.

Repeat installs and changed settings
  • A repeat pnpm install now acts on a change to these settings. Before, it reported "Already up to date".

    • storeDir or virtualStoreDir: it recreates node_modules.
    • virtualStoreDirMaxLength: it renames the virtual store directories.
    • dangerouslyAllowAllBuilds turned on: it runs the builds it skipped.
    • trustLockfile turned off: it verifies the lockfile.
  • pnpm add, pnpm remove, and pnpm update now fail when the node-linker setting differs from the one recorded in node_modules. A pnpm install of the whole workspace recreates node_modules with the new node-linker, and an install filtered to some projects fails pnpm/tasks#203.

  • An install filtered to some workspace projects now fails if node_modules was installed with a different nodeLinker, hoistPattern, publicHoistPattern, store, or virtual store. Before, it recreated node_modules and left the projects it skipped without their dependencies. A pnpm install of the whole workspace still recreates node_modules pnpm/tasks#217.

  • pnpm install now takes its fast path in a workspace with patchedDependencies when the previous install ran with another major version of pnpm.

  • pnpm install now relinks the bins of a workspace package when its bin field changes, including with --frozen-lockfile and an unchanged lockfile. A filtered install relinks them in the selected projects, and the next install that covers the remaining projects relinks them there #​17324.

  • pnpm install now removes command shims from node_modules/.bin when a workspace dependency renames or removes an entry from its bin field pnpm/tasks#211.

  • With nodeLinker: hoisted, an install that stops partway no longer leaves the next install trusting the packages it was replacing. Before, reverting the change that started the stopped install, such as a patch edit, kept the half-replaced package in node_modules.

  • pnpm run and pnpm exec no longer report the dependencies as out of date after a lockfile change when dedupePeers is true #​17322.

Resolving dependencies and the lockfile
  • A package that a plain range and a <prefix>: specifier both resolve from one registry is now recorded once in pnpm-lock.yaml and installed once. The lockfile key names the registry a package resolved from. When that registry declares a prefix, through prefix in registries or through namedRegistries, the package is keyed <name>@<prefix>:<version> however its dependency was written: with the prefix, as a plain range its scope routes to that registry, or through the default registry. Before, the plain range was keyed <name>@<version>, so one tarball was installed twice and instanceof checks and module singletons broke between the two copies. The same name and version served by two registries still get separate entries. When several prefixes declare one registry, its packages are keyed by the lexicographically smallest prefix.

    If a scope you route reaches a registry that also declares a prefix, your next pnpm install re-keys those entries, which shows up as a lockfile diff. Commit it. pnpm install --frozen-lockfile installs the lockfile as recorded.

  • pnpm install now resolves a scope's packages again when the scope is routed to another registry in registries. Before, the lockfile kept the versions and integrity resolved from the old registry, so the install failed when the new registry did not serve a locked version or served different content. pnpm records in the workspace state which registry each scope routed to, so a fresh clone without that record installs the lockfile as recorded. Changing the default registry resolves nothing again, and pnpm install --frozen-lockfile is unchanged.

  • An optional dependency written with a named-registry prefix, such as work:^1.0.0, now fails the install when it cannot be resolved but the lockfile already has a matching entry from that registry. Such a dependency was skipped, which removed its entries from the lockfile.

  • With injectWorkspacePackages: true, a workspace: dependency written as a relative path, such as workspace:../lib-a, in a workspace package now resolves from that package's directory #​17284.

  • Fixed pnpm install failing with ERR_PNPM_UNSUPPORTED_PROTOCOL when a workspace package injected through a relative path, such as workspace:../lib, has catalog: dependencies. Their catalog entries now resolve the way they do for a package injected by name #​17280.

  • pnpm install now applies the serverType registry setting when it updates the lockfile for an override or catalog change without a full resolution. pnpm wrote the tarball URLs of a declared registry into the lockfile in that case.

  • Added the pnpr value to the serverType registry setting. pnpm leaves the tarball URLs of a pnpr registry out of pnpm-lock.yaml.

  • A registries entry whose prefix is __proto__ is no longer ignored.

  • Installs delegated to a pnpr server now resolve every prefix declared for a registry URL. A dependency or lockfile entry that used the second of two prefixes for the same registry, such as zeta: next to work: in namedRegistries, failed on the server pnpm/tasks#204.

Registries, proxies, and downloading pnpm
  • The proxy settings httpProxy, httpsProxy, noProxy, proxy, and noproxy set in the global config.yaml, through PNPM_CONFIG_HTTPS_PROXY and the matching variables, or as --config.httpsProxy on the command line now apply to pnpm self-update and to the download of the pnpm version pinned in packageManager. Previously, these requests read the proxy only from .npmrc and the HTTPS_PROXY family of variables pnpm/tasks#215.

  • When https-proxy is false, pnpm now downloads the pnpm version pinned by packageManager through the legacy proxy setting, as installs already do. Setting proxy to false now also stops that download from using the HTTP_PROXY environment variable. The signature check of the pinned pnpm now uses the same proxy and TLS settings as its download pnpm/tasks#193.

  • strictSsl and localAddress set in the global config.yaml, through PNPM_CONFIG_STRICT_SSL and PNPM_CONFIG_LOCAL_ADDRESS, or on the command line now apply to pnpm self-update and to the download of the pnpm version pinned in packageManager. These requests read them from .npmrc only before. --config.localAddress now reaches them in the camelCase spelling too pnpm/tasks#201.

Commands
  • pnpm audit --ignore and pnpm audit --ignore-unfixable now exit with a non-zero code when vulnerabilities at or above the audit level remain after ignoring. Before, these commands always exited with code 0.

  • pnpm audit --fix and pnpm audit --interactive now fail with ERR_PNPM_AUDIT_FIX_WITH_IGNORE when combined with --ignore or --ignore-unfixable. Before, the fix ran and the ignore flags had no effect.

  • pnpm ci --lockfile and pnpm ci --config.lockfile=true no longer delete pnpm-lock.yaml. pnpm ci now always keeps the lockfile and runs a frozen install from it.

  • pnpm deploy now keeps a deployed symlink to a directory inside the project even if the directory is not among the deployed files, such as a link into node_modules #​17288.

  • pnpm pack and pnpm publish again include the files of a publishConfig.directory that is reached through a symlink, together with its bundled dependencies #​17390.

  • pnpm -r publish --batch now sends PUT /-/pnpr/v0/publish, the batch publish endpoint that pnpr serves.

  • pnpm store prune now keeps the packages that a project still uses when pnpm copied or cloned them into node_modules. These include patched packages, built packages, and every package installed with packageImportMethod: copy. Before, the prune removed them, and the next install downloaded them again #​7192.

  • pnpm store prune now keeps the packages of a project that was installed with a different symlinked spelling of the store path. Previously, prune dropped such a project from its list and removed the packages only that project used from the global virtual store.

Speed and output
  • Sped up installs of projects whose local directory dependencies share transitive local directory dependencies. pnpm no longer checks a shared directory again for each direct dependency that reaches it #​17374.

  • Output that fills the terminal, such as pnpm run --stream script output, is now written once. Before, every new line also rewrote all the lines already on screen #​17387.

  • The warning about unrecognized settings now marks symlinkedLockfileTargetDirs as a setting of a newer pnpm version.

Platinum Sponsors

Bit OpenAI Notion
CodeRabbit

Gold Sponsors

Sanity Discord Vite
SerpApi Stackblitz Workleap
Nx Latitude

v11.28.8: pnpm 11.28.8

Compare Source

Patch Changes
  • The standalone @pnpm/exe builds now embed Node.js 26.12.1. The previously embedded Node.js 26.0.0 still trusted the certificate authority intermediates that Node.js distrusted in October 2026, so a standalone pnpm accepted TLS certificates issued under them.

Platinum Sponsors

Bit OpenAI Notion
CodeRabbit

Gold Sponsors

Sanity Discord Vite
SerpApi Stackblitz Workleap
Nx Latitude

v11.28.7: pnpm 11.28.7

Compare Source

This release rejects registry metadata that names a different package than the one requested, applies trustPolicy to the pnpm version a project pins, and caps unpacked package size with maxTarballUnpackedSize. It also removes support for registry revisions, fixes verifyDepsBeforeRun after filtered installs, and finishes commands with their own exit code when a pipe reader exits early.

Patch Changes
Security
  • pnpm now fails with ERR_PNPM_REGISTRY_NAME_MISMATCH if a registry returns metadata for a package other than the one requested. Before, pnpm installed the package under the name in the metadata, so allowBuilds rules for the requested package did not apply to it.

  • pnpm now applies trustPolicy to the pnpm version a project pins in packageManager or devEngines.packageManager. A pinned version whose trust evidence was downgraded fails the command before pnpm switches to it or records it in the lockfile #​16319.

  • minimumReleaseAgeExcludePrune and trustPolicyExcludePrune now keep exclusions for resolved configuration dependencies and their transitive dependencies #​17142.

  • Added the maxTarballUnpackedSize setting. pnpm install fails with ERR_PNPM_TARBALL_TOO_LARGE when the files of one package unpack to more than this many bytes, 4 GiB by default pnpm/tasks#81.

Resolving dependencies
  • Registry revisions are no longer supported. pnpm now fails with ERR_PNPM_REGISTRY_REVISIONS_UNSUPPORTED on registry metadata that selects a revision, on a +rN version specifier, and on a lockfile entry with a revision field. pnpm update --patches is removed.

  • When pnpm install resolves a dependency again, it now reuses a version that the install already resolved for the same package, as a fresh install does. Before, it kept the version the lockfile pinned and added a second copy of the package. A locked version still stays when nothing else in the install prefers another version. To pin a transitive dependency on purpose, use overrides #​17084.

  • When another workspace project adds a different version of a package, a project's auto-installed peer on that package now moves to the version a fresh install picks. It used to stay on its locked version while any other project still accepted that version #​17058.

  • An optional peer that pnpm adds to a project now keeps the version the lockfile recorded for that project only while the dependency graph still holds it. Otherwise it follows its provider to a version the graph holds. Before, pnpm kept a higher version that only the lockfile held, which left two copies of the peer #​16443.

  • A package that lists the same dependency in dependencies and as an optional peer now gets the peer bound when a project adds a provider for it later. The lockfile now records every peer a package declares, including one its own dependency supplies #​17056.

  • pnpm install --prod no longer drops a dependency that a package declares both as an optional peer and as its own dependency, when the package resolved it as its own dependency and a dev dependency provides the same package under another alias.

  • pnpm now measures a pnpm.overrides entry written as a workspace: path, such as workspace:./packages/foo, from the directory holding pnpm-workspace.yaml. It used to be measured from each package the override rewrote. The install then linked a directory that does not exist, or failed if workspace packages were injected #​17010.

  • pnpm install now removes config dependencies that are no longer declared, including when the entire configDependencies setting is removed. Frozen installs reject a lockfile that still records removed config dependencies.

  • pnpm add now reads the package name correctly from a tarball URL under a registry URL that has a path, such as https://example.com/npm/. Before, the registry path became part of the name, so a scoped package failed with ERR_PNPM_INVALID_PACKAGE_NAME.

  • pnpm add no longer warns that a gist dependency was replaced from a different source when the new specifier names the same gist in another form, such as gist:<id> and https://gist.github.com/<user>/<id>.

  • With minimumReleaseAge set, pnpm now revalidates a package's cached full metadata with a single ETag request so an unchanged registry answers with 304, and keeps using the cached copy once the registry confirms it is current, even when the metadata does not list a publish time for every version. Previously, pnpm downloaded that metadata again whenever the cached copy was older than minimumReleaseAge. Packages listed in minimumReleaseAgeExclude also resolve from cached metadata without a registry request when the lockfile already has the version their range picks.

Linking node_modules and workspaces

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 1am and before 5am"
  • Automerge
    • "after 2am and before 5am"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Oct 2, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3789fd3c-6169-40bb-b9ab-3d5d3712c008

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 2, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.73%. Comparing base (10796d9) to head (e74e149).

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #98   +/-   ##
=======================================
  Coverage   84.73%   84.73%           
=======================================
  Files          10       10           
  Lines         773      773           
  Branches      229      228    -1     
=======================================
  Hits          655      655           
  Misses        105      105           
  Partials       13       13           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d12aa92 to 9a62b1b Compare October 3, 2026 12:30
@renovate renovate Bot changed the title chore(deps): update pnpm to v11.28.2 chore(deps): update all non-major dependencies Oct 3, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 2cda15a to 7f1a2e1 Compare October 7, 2026 05:16
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update pnpm to v11.28.4 Oct 7, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7f1a2e1 to 1e90425 Compare October 9, 2026 08:31
@renovate renovate Bot changed the title chore(deps): update pnpm to v11.28.4 chore(deps): update pnpm to v11.28.5 Oct 9, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1e90425 to b74c3ae Compare October 9, 2026 16:52
@renovate renovate Bot changed the title chore(deps): update pnpm to v11.28.5 chore(deps): update all non-major dependencies Oct 9, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 812423e to 2d2faa8 Compare October 13, 2026 14:28
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update pnpm to v11.28.5 Oct 13, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 2d2faa8 to f262e87 Compare October 16, 2026 12:24
@renovate renovate Bot changed the title chore(deps): update pnpm to v11.28.5 chore(deps): update all non-major dependencies Oct 16, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from ae16ed9 to 876fd14 Compare October 23, 2026 00:21
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 286bba9 to 8975be6 Compare October 29, 2026 03:54
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9d8e315 to 02efa5b Compare October 30, 2026 11:59
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 02efa5b to e74e149 Compare October 30, 2026 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants